Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tCrbDiuoSoX6OUsRF927cCcz6Zg.roa
File: tCrbDiuoSoX6OUsRF927cCcz6Zg.roa (raw, json)
Hash identifier: NBMkAQ/Vuf5+H4aZNdMnDfMnvQnabL1oJl53ybZV/IA=
Subject key identifier: B4:2A:DB:0E:2B:A8:4A:85:FA:39:4B:11:17:DD:BB:70:27:33:E9:98
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01968F3A1756546B675B3589249246017AE9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tCrbDiuoSoX6OUsRF927cCcz6Zg.roa
Signing time: Fri 02 May 2025 04:21:11 +0000
ROA not before: Fri 02 May 2025 04:21:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.153.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.93.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 04:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:3a:17:56:54:6b:67:5b:35:89:24:92:46:01:7a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 2 04:21:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b42adb0e2ba84a85fa394b1117ddbb702733e998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:f9:72:fd:bc:ae:80:38:b3:91:c8:f2:53:
7c:67:42:f5:ab:b2:13:50:2e:ad:04:c9:db:ad:bc:
ef:e3:cd:bf:b4:a2:44:b7:bd:68:66:90:5d:e8:c3:
f3:e0:b6:f1:3e:64:01:1a:63:c9:e7:d7:d4:6a:a6:
41:32:08:9b:3b:2b:19:17:67:61:39:39:93:3d:4f:
1d:b6:08:cd:3c:94:01:88:4e:37:15:7b:c8:9b:ba:
1b:a7:3e:82:e2:6d:b4:dc:b6:34:2d:c4:34:15:6c:
46:a1:3d:c4:94:55:7d:8b:49:02:a0:49:8f:43:6e:
30:73:d6:3f:c9:4a:9e:49:5d:91:14:a4:a3:0c:e2:
3e:0b:4a:c4:ea:ca:b5:c8:3f:db:3d:ba:13:ea:21:
04:d6:8f:a8:89:5d:9c:96:88:30:47:7b:cf:4f:5c:
d9:ae:ce:22:30:9f:68:31:2d:4a:98:d5:56:1f:a7:
8d:26:4c:0d:be:2f:a5:86:a0:78:9a:ae:43:59:1e:
0e:b6:60:c2:8e:1e:2b:44:14:eb:c6:19:7b:57:c0:
45:0e:51:4f:ef:0f:5d:76:f7:6b:17:bb:32:b7:1b:
20:fb:0a:37:3c:07:25:1e:91:d2:be:74:27:de:a2:
25:b7:11:d0:ab:63:f8:e1:66:39:ee:10:da:22:06:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2A:DB:0E:2B:A8:4A:85:FA:39:4B:11:17:DD:BB:70:27:33:E9:98
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tCrbDiuoSoX6OUsRF927cCcz6Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.153.0/24
77.90.33.0/24
85.93.21.0/24
Signature Algorithm: sha256WithRSAEncryption
eb:82:10:d1:1d:4b:8a:42:73:12:c2:ca:d9:1d:af:63:57:1e:
40:e2:45:fb:b3:4d:d7:45:8b:80:53:be:af:b0:9a:54:f0:9f:
f7:4f:c7:30:a0:78:f8:b9:35:26:17:a2:ba:61:4f:26:13:14:
f7:13:59:4e:6b:37:12:74:d0:30:3a:66:3b:96:e6:01:d4:fe:
f0:85:bc:18:b5:66:44:71:3b:75:65:65:5e:c9:46:66:d5:34:
62:e6:3d:77:14:e6:eb:02:33:a8:da:73:94:06:9f:e3:fa:60:
c1:c9:90:cc:0d:9c:55:cb:ff:13:e1:cf:fe:31:93:cc:8c:53:
43:1e:a7:35:cf:6b:d9:bb:a8:74:28:12:ec:5b:a4:7a:8e:b6:
01:25:60:2c:fc:ae:b3:f4:0c:e9:f4:b5:97:a9:15:05:25:95:
ad:56:84:cc:93:34:a7:85:8c:33:82:6a:7f:7e:01:7e:ee:c5:
24:eb:a4:59:e4:ae:ab:3d:a3:0e:20:26:7b:6e:14:21:45:17:
16:94:62:22:83:7e:a5:55:bd:e0:a3:5b:84:2b:55:3c:50:8e:
10:5d:42:1d:d1:3a:fd:20:f2:f8:e9:9e:c8:f5:98:26:51:88:
4a:8c:2f:4a:f5:8c:26:f7:d6:4b:11:99:55:71:ec:a7:1b:90:
89:2d:a9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:04:01 2025 by rpki-client